Michael:
Thanks.
The link provided works as expected and I get the same result in our test install.
I was taking the Secunia post more literally though in my test.
For example, if I try:
http://www.viperalley.com/gallery/mi...port=1&final=1
I get a note following that the report has been sent to the admin, same as I get on our site.
Shouldn't the report not go through with no email to the admin since the user isn't logged in?
Thanks.